Struct LfsGrantProvider 

pub struct LfsGrantProvider { /* private fields */ }

The wired ownership provider — alkgit’s registry composed onto the ops ACL (the batch’s authorization posture: lfs.md §1 — the per-repo grant governs batch access, the ADR-011 posture composed onto the ops ACL). The alkblobs ops specs gate on blob-namespace resources whose id is the payload’s namespace — the repo id; this provider answers with the same authorize policy function the git surface composes: read granted (or anonymous-public — the door’s synthesized anon identity rides the public-repo flag here), write per the grant monotonicity (manage ⊃ write ⊃ read). Unknown repos deny by default — the unknown ≡ unauthorized posture. Served through the cached read provider’s sync resolve (the hot path — no await, no round trip; a stale cache delays revocation until the next refresh, the same posture the git serving path takes).

Implementations

impl LfsGrantProvider

pub fn new(provider: Arc<CachedRegistryProvider>) -> Self

The provider over a cached read provider (the assembly’s — SubstrateAssembly::provider).

Trait Implementations

impl OwnershipProvider for LfsGrantProvider

fn owns( &self, identity: &Identity, resource_type: &str, resource_id: &str, action: &str, ) -> bool

Does identity own resource_type/resource_id with action? The action parameter is accepted but not gated on — the base model is “owner can do anything they own.” Per-action grants are a future extension; this preserves the door without building the mechanism.

fn owned_resources( &self, identity: &Identity, resource_type: &str, ) -> Vec<String>

What resources of resource_type does identity own? Returns the set of resource IDs the caller owns, for the handler to filter against (the result-filter path).

fn owns_any(&self, identity: &Identity, resource_type: &str) -> bool

Does identity own any resource of resource_type? The scope-gate path.